2949 matches found
XWiki >= 6.0-rc-1 - Cross-Site Scripting
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the delete template to perform a XSS, e.g. by using URL such as:...
ROOT-APP-PYPI-GHSA-JM78-9FVV-MHGR GHSA-jm78-9fvv-mhgr in GitPython - Patched by Root
Root has patched GHSA-jm78-9fvv-mhgr in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-64647 CVE-2026-64647 in next - Patched by Root
Root has patched CVE-2026-64647 in the next package for Root:npm. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-42587 CVE-2026-42587 in io.netty:netty-codec-http2 - Patched by Root
Root has patched CVE-2026-42587 in the io.netty:netty-codec-http2 package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-42583 CVE-2026-42583 in io.netty:netty-codec - Patched by Root
Root has patched CVE-2026-42583 in the io.netty:netty-codec package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-45673 CVE-2026-45673 in io.netty:netty-resolver-dns - Patched by Root
Root has patched CVE-2026-45673 in the io.netty:netty-resolver-dns package for Root:Maven. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-R7G4-QG5F-QQM2 GHSA-r7g4-qg5f-qqm2 in nodemailer - Patched by Root
Root has patched GHSA-r7g4-qg5f-qqm2 in the nodemailer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-53550 CVE-2026-53550 in js-yaml - Patched by Root
Root has patched CVE-2026-53550 in the js-yaml package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-6429 CVE-2026-6429 in curl - Patched by Root
Root has patched CVE-2026-6429 in the curl package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-3304 CVE-2026-3304 in multer - Patched by Root
Root has patched CVE-2026-3304 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-46597 CVE-2026-46597 in golang.org/x/crypto - Patched by Root
Root has patched CVE-2026-46597 in the golang.org/x/crypto package for Root:Go. Multiple fixed versions available...
ROOT-OS-ALPINE-317-CVE-2026-34182 CVE-2026-34182 in openssl - Patched by Root
Root has patched CVE-2026-34182 in the openssl package for Root:Alpine:3.17. Multiple fixed versions available...
Astra Linux – Vulnerability in Squid
Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid was vulnerable to out-of-bound reads when handling ICP traffic. This issue allowed a remote attacker to access small amounts of memory that might contain sensitive information, by responding with...
ROOT-APP-NPM-CVE-2026-44489 CVE-2026-44489 in axios - Patched by Root
Root has patched CVE-2026-44489 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-7Q8Q-RJ6J-MHJQ GHSA-7q8q-rj6j-mhjq in axios - Patched by Root
Root has patched GHSA-7q8q-rj6j-mhjq in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-55565 CVE-2024-55565 in nanoid - Patched by Root
Root has patched CVE-2024-55565 in the nanoid package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-38428 CVE-2025-38428 in linux - Patched by Root
Root has patched CVE-2025-38428 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-31777 CVE-2026-31777 in linux - Patched by Root
Root has patched CVE-2026-31777 in the linux package for Root:Debian:12. Multiple fixed versions available...